Rust RESTful API - Xây Web Service Production-Ready Với Axum

Toàn series xây dựng một dự án duy nhất: shop — REST API e-commerce production-ready với khoảng 60 endpoints và 17 bảng PostgreSQL. Mỗi bài thêm / sửa code incremental trên cùng codebase, mô phỏng đúng quy trình build real-world product. Không có "tutorial code" — mọi thứ bạn viết đều là code sẽ dùng được trong service production thật.

Domain model: Users (customer + admin), Categories (hierarchical), Products (SKU, variants, inventory), Cart, Orders (state machine), Payments (Stripe-like webhook), Inventory (reservation + restock), Reviews, Notifications (email + WebSocket), Audit log, Idempotency keys, Sessions.

Workspace 7 crate:

• shop-api - binary axum HTTP server (port 3000, routes / handlers / middleware / extractors)
• shop-core - library domain logic, entity, service, repository trait (pure, no infra)
• shop-db - library PostgreSQL adapter sqlx, impl repository trait
• shop-cache - library Redis adapter (fred / redis-rs): session, cache, distributed lock
• shop-worker - binary apalis background worker (email, inventory, analytics)
• shop-cli - binary admin CLI (seed, user-create, ...)
• shop-common - library shared utility (config, error, telemetry, pagination)

Tuần 1: REST & HTTP foundation + Axum overview (Bài 1 - 20)
├── REST 6 constraint, HTTP method / status / header
├── JSON, OpenAPI, content negotiation
└── Hello-world axum, handler, response type, project structure

Tuần 2: Routing + Extractor + Response (Bài 21 - 50)
├── Path / Query / nested / merge / fallback / versioning
├── Custom extractor, cookie, multipart, streaming
└── JSON validate, body limit, compression, SSE

Tuần 3: PostgreSQL + sqlx + CRUD cơ bản (Bài 51 - 70)
├── Docker Postgres, sqlx-cli, connection pool
├── query! / query_as! / FromRow
└── CRUD Shop entity: User, Product, Category — testcontainers

Tuần 4: sqlx nâng cao + Migration + Query builder (Bài 71 - 100)
├── Transaction, isolation, JSONB, array, bulk insert
├── Migration strategy, idempotent, index, view
└── Pagination, full-text search, dynamic filter, slow query

Tuần 5: Authentication + JWT + OAuth2 + RBAC (Bài 101 - 140)
├── argon2 hashing, session cookie, CSRF
├── JWT HS256/RS256, refresh token, blacklist
└── OAuth2 (Google, GitHub), RBAC + ABAC, Casbin
⚠️ Tuần quan trọng — sai auth = security incident

Tuần 6: Tower Middleware + Rate Limit + Caching + Redis (Bài 141 - 200)
├── tower Service / Layer / from_fn, layer ordering
├── CORS, compression, timeout, security headers
├── tower-governor, distributed rate limit Redis
└── moka, cache-aside, Redis session, idempotency key

Tuần 7: Background Jobs + Logging + Metrics (Bài 201 - 230)
├── Apalis worker, retry policy, DLQ, cron
├── tracing structured log, Loki aggregation
└── Prometheus metric, RED/USE, alert rule, SLO

Tuần 8: Distributed Tracing + Health + Testing (Bài 231 - 280)
├── OpenTelemetry, Jaeger, span attribute, sampling
├── Health / readiness / liveness, flamegraph, jemalloc
├── Unit + integration + axum-test + testcontainers
└── E2E + contract (Pact) + criterion + k6 + chaos

Tuần 9: Configuration + Secrets + Docker + Deployment (Bài 281 - 300)
├── 12-factor config, config crate, dotenvy, Vault
├── Dockerfile multi-stage, distroless, cargo-chef
└── docker-compose, graceful shutdown, fly.io / K8s, canary

Tuần 10: CI/CD + Monitoring stack (Bài 301 - 310)
├── GitHub Actions, cache cargo, parallel test matrix
├── Docker build push GHCR/ECR, semantic release
└── Prometheus + Grafana + Loki + Alertmanager + SLO

Tuần 11-12: Capstone Projects (Bài 311 - 316)
├── Multi-tenant SaaS (RLS) + WebSocket chat + GraphQL
├── gRPC tonic + Scheduled job runner
└── Tổng kết — 50-item production checklist + career path